Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: iSvf4k8r4+9N6y14YuEONVcxj+wGHeUE39dTPGq728g=
Subject key identifier: 10:04:7F:BE:18:CD:E4:63:18:B4:79:F2:D5:57:25:B0:E6:1A:02:6D
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 019CAAFD3F3204EC00861D7A8E8BC4F0F86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 0724
Signing time: Sun 01 Mar 2026 20:00:49 +0000
Manifest this update: Sun 01 Mar 2026 20:00:49 +0000
Manifest next update: Mon 02 Mar 2026 20:00:49 +0000
Files and hashes: 1: TYmQbCMoT4fS2qLD8XTST39V7ao.roa (hash: AGtO8iqNaCFj7ECH8S64l5TD2JUqi3IXF+NQdgnWnfk=)
2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: SdTudQ9CzrAhbKgen+i5GJp4emYHxnljJlETSNNTrpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3f:32:04:ec:00:86:1d:7a:8e:8b:c4:f0:f8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Mar 1 20:00:49 2026 GMT
Not After : Mar 2 20:00:49 2026 GMT
Subject: CN=10047fbe18cde46318b479f2d55725b0e61a026d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:d2:c1:58:ec:44:a9:56:70:c7:7c:bb:62:
73:8c:ff:17:9f:37:53:5c:af:42:39:e1:ce:d0:6a:
f8:1b:21:57:35:66:78:a3:fa:72:81:52:5f:8f:9f:
b4:8b:89:a2:8c:d0:30:be:4b:0f:f0:36:9a:3d:c0:
88:64:d4:20:5f:99:c8:13:25:d0:f7:7f:2b:72:5e:
9e:16:be:55:97:3f:3f:8e:19:6f:2a:47:4a:8a:0e:
e4:0a:5e:8b:45:e7:57:29:25:5c:e5:7d:8f:66:4e:
f8:b1:f9:66:78:23:1b:ee:6c:08:d1:ef:a1:80:f0:
8e:83:30:4b:da:88:62:4d:fc:22:98:4e:ee:91:cf:
92:b4:67:7c:f4:37:19:82:9e:9a:e3:59:ad:4b:1f:
4d:36:48:74:61:e8:bd:88:04:2b:69:b4:8c:5d:88:
5c:b9:8c:5f:63:59:2a:da:32:af:34:a7:c7:17:02:
ea:5e:9d:64:0a:9c:7f:9b:c0:94:03:cb:96:6e:df:
a5:dd:fc:e0:83:ee:46:3e:8c:bb:2b:e7:a7:42:4e:
f2:c1:a5:99:09:fb:1b:1b:67:37:90:04:ab:f4:a8:
d9:1f:f1:7e:ab:d5:13:7f:91:81:37:57:25:28:81:
6d:8b:be:ff:b8:b0:a6:19:a3:92:c0:02:94:d6:52:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:04:7F:BE:18:CD:E4:63:18:B4:79:F2:D5:57:25:B0:E6:1A:02:6D
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bf:dc:39:ea:d6:6c:6e:95:72:3f:64:a2:b0:66:23:87:0e:
e3:5e:0c:2f:02:eb:93:70:23:9e:ff:d7:15:e0:05:fb:c2:a3:
dd:1c:1e:a0:6b:b3:0c:58:81:f7:9d:dc:02:ef:6a:70:94:e7:
78:2c:d9:07:f9:60:5f:5a:f6:42:dd:5e:9e:6c:73:70:59:ba:
c1:d8:fc:1e:40:17:b1:10:3a:82:94:68:87:ce:3d:40:37:8c:
f4:8e:1a:7c:39:ac:f9:85:d4:4e:d0:d2:bd:b4:bf:96:e1:04:
f3:e6:31:cc:36:e0:83:4b:59:10:b1:d4:93:9d:8e:00:5c:64:
48:b3:f2:7a:3b:73:2c:04:ef:f4:58:aa:eb:d8:44:dd:97:bc:
f6:fc:99:25:bd:58:38:da:c6:12:34:44:32:30:4d:32:08:ab:
e4:f4:aa:2b:62:7a:1a:79:45:0e:61:fe:43:bc:5c:15:3d:04:
fa:98:d1:ac:7a:dc:14:8b:ef:05:dc:40:a7:cc:7f:96:de:f2:
cc:93:fd:9e:cb:ff:21:c3:3a:07:1d:8c:bf:20:4f:a9:bd:14:
79:3b:6b:0c:8e:c3:45:d1:e7:83:bb:53:ac:c3:92:bb:86:62:
78:f9:3d:b4:e0:91:1c:ef:6e:3a:0b:8b:98:e9:14:18:16:b6:
20:8a:66:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:14 2026 by rpki-client